Description (CNA)
The vulnerability allows an attacker to craft MQTT messages that include relative path traversal sequences, enabling them to read arbitrary files on the system. This could lead to the disclosure of sensitive information, such as configuration files and JWT signing secrets.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Moxa / MXview One Series | affected 0 before 1.4 |
CWE
CWE-24
References
- https://www.moxa.com/en/support/product-support/security-advisory/mpsa-240735-multiple-vulnerabilities-in-mxview-one-and-mxview-one-central-manager-series
- https://www.cisa.gov/news-events/ics-advisories/icsa-24-268-05
ADP enrichment
No English description supplied.
No references supplied.